11 matches found
GHSA-MHC4-G3WH-CW7M Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data
Vulnerability Details File: go/vt/vttablet/tabletmanager/vreplication/vrlog.go Summary vttablet's /debug/vrlog HTTP endpoint streams live VReplication event data — including the literal SQL DML statements being replicated by MoveTables, Reshard, Materialize, and "vitess"-strategy Online DDL...
5.3CVSS6AI score0.00393EPSS
SaveExploits0References7
20